@event4u/agent-config 8.5.0 → 8.7.0

package/.claude-plugin/marketplace.json

@@ -6,7 +6,7 @@
   },
   "metadata": {
     "description": "Bootstrap shim for the event4u agent-config suite. This plugin ships ONLY the dispatcher hooks plus one install-pointer skill — ALL content (skills, rules, commands) is installed via `npx -y @event4u/agent-config init`, which writes the file projection AND registers the same hooks in ~/.claude/settings.json. DEPRECATED as a content channel; kept so the marketplace listing stays discoverable and existing installs keep working hooks.",
-    "version": "8.5.0",
+    "version": "8.7.0",
     "keywords": [
       "agent-config",
       "skills",

package/CHANGELOG.md

@@ -989,6 +989,60 @@ our recommendation order, not its support status.
 > that forces a new era split (`# Era: 8.2.x`, etc.) — see
 > [`docs/contracts/CHANGELOG-conventions.md § Era splits`](docs/contracts/CHANGELOG-conventions.md).
 
+## [8.7.0](https://github.com/event4u-app/agent-config/compare/8.6.0...8.7.0) (2026-07-08)
+
+### Features
+
+* **settings:** validate + surface projection.rule_workspaces/rule_packs ([a27bbf5](https://github.com/event4u-app/agent-config/commit/a27bbf53c7fca206176ed6ddd38b1ec5ee11e357))
+* **install:** consumer Cursor/Windsurf get host-native rule surfaces ([8b68ff5](https://github.com/event4u-app/agent-config/commit/8b68ff58e9c240e41acce1f25faa51bc47f3564b))
+* **install:** consumer rule scoping reaches both install pipelines ([88248e4](https://github.com/event4u-app/agent-config/commit/88248e4d39bd056db133021acc0cc2b0782e78cc))
+* **ci:** trigger-eval presence ratchet with shrink-only grandfather allowlist ([d8f0c0d](https://github.com/event4u-app/agent-config/commit/d8f0c0dd04b3388205becf2cce30c6e0ea09197b))
+
+### Bug Fixes
+
+* **ci:** install repo-root deps in the MCP deploy workflow ([9183c4e](https://github.com/event4u-app/agent-config/commit/9183c4e358e76b344058eb01d7f945f246a44828))
+
+### Documentation
+
+* add frontier quality roadmaps ([bfa9315](https://github.com/event4u-app/agent-config/commit/bfa93157848bf13020a6cb3dcd06381c013fb035))
+* **skills:** skill-writing names the CI-enforced trigger-eval presence gate ([464722e](https://github.com/event4u-app/agent-config/commit/464722efe83243e3ae480411d59850dac92ca1ac))
+
+### Chores
+
+* **roadmaps:** regenerate progress dashboard ([a8f4178](https://github.com/event4u-app/agent-config/commit/a8f4178a84ef8c66408afe3d5af195ce19ccf5d0))
+* **gitignore:** ignore Codex CLI interop output (.agents/, .codex/) ([8756d52](https://github.com/event4u-app/agent-config/commit/8756d5226e8760c72d6205e98b9822620d303418))
+* **dist:** rebuild install bundle after settings-schema extension ([44818d4](https://github.com/event4u-app/agent-config/commit/44818d4c8ad69ec545e99820e3292f0346bb2f20))
+* **roadmap:** close Phase 1b with pinned consumer-install evidence ([3a2455f](https://github.com/event4u-app/agent-config/commit/3a2455f236279390eb5a8cfe986e6b911493391c))
+* **condense:** refresh stale hash for commands/upstream-contribute ([c668370](https://github.com/event4u-app/agent-config/commit/c668370663bf7272932c33b5a7874dca4b08a9db))
+* **roadmaps:** composition-ratchet roadmap executed + archived; adoption roadmap sequenced next ([1bde2ea](https://github.com/event4u-app/agent-config/commit/1bde2ea00478bd1e46c4e9596c8c0cd5962b9ee1))
+
+Tests: 6949 (+6 since 8.6.0)
+
+## [8.6.0](https://github.com/event4u-app/agent-config/compare/8.5.0...8.6.0) (2026-07-08)
+
+### Features
+
+* **cost-routing:** tier-downshift layer — telemetry fields, category defaults, tripwires, slice inference, verify-fail escalation ([e9839f5](https://github.com/event4u-app/agent-config/commit/e9839f5a034c3a0882e8956a2a3f580b3978056a))
+
+### Bug Fixes
+
+* **ci:** install task in the release workflow ([19072d9](https://github.com/event4u-app/agent-config/commit/19072d9bcbb6d30cd943804f287dd79c9c709167))
+
+### Documentation
+
+* **roadmaps:** add four frontier-prompt-harvest roadmaps ([e232e34](https://github.com/event4u-app/agent-config/commit/e232e342401bd6edafda79cd64ce8ed4ff6ddd93))
+* **proof:** regenerate proof.md with the backed downshift-cost-reduction claim ([6f28604](https://github.com/event4u-app/agent-config/commit/6f286048b609442be81ac60a8c64df544a369df0))
+* **roadmaps:** unify tripwire engine wording on the ADR-116 path ([f4ee375](https://github.com/event4u-app/agent-config/commit/f4ee37540ea6f9724014c63be05617e4abcdaa1b))
+* **adr:** pin the memory scale-tripwire activation path (ADR-116) ([7efe88a](https://github.com/event4u-app/agent-config/commit/7efe88a7cda064e659a830a2d6a70e506ab21408))
+* **claims:** back downshift-cost-reduction with the routing-downshift bench run ([38f3194](https://github.com/event4u-app/agent-config/commit/38f31942b16474fcc5977f0560da435ce84a81dd))
+
+### Chores
+
+* **condense:** recondense cost-routing context/command edits into dist ([33fe1a3](https://github.com/event4u-app/agent-config/commit/33fe1a353a3eef52d024079016b32b9fe02b0531))
+* **contexts:** durable verdict note for cost-aware model routing ([cbff1bd](https://github.com/event4u-app/agent-config/commit/cbff1bdc7f2b0b87843283443de534c48f5ddd54))
+
+Tests: 6943 (+7 since 8.5.0)
+
 ## [8.5.0](https://github.com/event4u-app/agent-config/compare/8.4.1...8.5.0) (2026-07-08)
 
 ### Features

package/dist/agent-src/commands/cost/report.md

@@ -118,6 +118,26 @@ Orchestration telemetry (YYYY-MM, N dispatches):
   guardrail breaches:  [token_blowup | spawn_failure | verify_skip | none]
 ```
 
+When orchestration lines carry the routing extension fields
+(`task_class` / `tier_chosen` / `escalated_from` / `verify_result_by_tier` —
+see `orchestration-telemetry.md`), append the per-tier routing view using
+`readTierRoutingMetrics`, `escalationPromotionCandidates`, and
+`verifyPassDrift` from the same module — the per-tier QUALITY view a
+spend-only dashboard misses:
+
+```
+Tier routing (YYYY-MM):
+  dispatches by tier:      lite N · medium N · high N
+  escalation rate by class: <class>: N.N% (promotion tripwire: >40%)
+  verify-pass rate by tier: lite N.N% · medium N.N%
+  tripwires fired:          [promote <class> | verify-pass drift on <tier> | none]
+```
+
+A fired tripwire is a recommendation to surface, never an auto-flip: the
+escalation tripwire suggests promoting the class's static default tier; the
+drift tripwire flags verifier/model drift for investigation (per
+`subagent-steering.md § Cost-routing tripwires`).
+
 If no orchestration lines exist yet (telemetry capture not yet running or
 no delegated dispatches this month), surface:
 

package/dist/agent-src/contexts/execution/auto-dispatch-classification.md

@@ -55,6 +55,36 @@ dwarfs the work). Below the floor → in-session.
 | `parallelizable: files\|independent` / independent slices | `do-in-parallel` |
 | change needing verification (any of the above) | implementer + cross-model judge per the `subagent-orchestration` Iron Law |
 
+## Per-slice tier inference (v1.5 — deterministic, task-TYPE-keyed)
+
+Once a slice is classified **delegable**, a second deterministic table infers
+its `model_tier` (road-to-cost-aware-model-routing, council 2026-07-08).
+Keyed **exclusively on the classifier's task-TYPE outputs** — never raw size
+metrics; diff size anti-correlates with difficulty in refactoring domains.
+
+```
+UNKNOWN / AMBIGUOUS → inherit (SESSION TIER). NEVER GUESS DOWN.
+SIZE SIGNALS ARE NEGATIVE GUARDS ONLY — THEY REVOKE A lite CANDIDACY,
+THEY NEVER CREATE ONE.
+```
+
+| Slice type (classifier output) | Inferred tier |
+|---|---|
+| Delegable + read-only fan-out (grep / inventory / discovery targets) | `lite` |
+| Delegable + mechanical / template-driven transform WITH test coverage | `lite` (verify-fail escalates to `medium` per the steering cascade) |
+| Delegable + mutating WITHOUT test coverage | `medium` |
+| Delegable + synthesis / judgment (review, analysis slice) | `medium` — judge one tier up per the orchestration Iron Law |
+| Any other / ambiguous shape | `inherit` — session tier, no downshift |
+
+**Negative size guard:** slice scope exceeding the mechanical envelope
+(multi-file mutation, diff surface beyond single responsibility) loses `lite`
+candidacy, resolves one row down — size never argues FOR a downshift, only
+against one.
+
+Every inferred decision records `tier_source: "inferred"` in orchestration
+telemetry (static pins record `"static"`; session-tier runs `"inherit"`) so
+the evidence gate scores inferred routing separately from static pinning.
+
 ## v2+ (deferred, gated on Phase 6 evidence)
 
 LLM-based classification — only if the deterministic rules prove too coarse

package/dist/agent-src/contexts/execution/orchestration-telemetry.md

@@ -19,7 +19,12 @@ v1 forward-compat rule on unknown fields).
   "wall_clock_ms": 0,
   "outcome": "DONE",
   "verify_mode": "deterministic",
-  "verdict_changed_outcome": null
+  "verdict_changed_outcome": null,
+  "task_class": null,
+  "tier_chosen": null,
+  "tier_source": null,
+  "escalated_from": null,
+  "verify_result_by_tier": null
 }
 ```
 
@@ -36,6 +41,15 @@ v1 forward-compat rule on unknown fields).
 | `outcome` | enum | One of `DONE` · `DONE_WITH_CONCERNS` · `NEEDS_CONTEXT` · `BLOCKED` · `killed`. |
 | `verify_mode` | enum | How output was verified: `deterministic` · `judge` · `none`. |
 | `verdict_changed_outcome` | bool \| null | **A3 extension (ADR-109 Track A).** For a review/verdict subagent (e.g. `production-validator`): did the verdict change the outcome vs the in-session baseline? `true` = caught a real issue the baseline missed / flipped a false `READY`→`NOT READY`; `false` = no lift; `null` = not a verdict dispatch / not measured. **Negative-control (clean single-file) tasks MUST record `false`** — a `true` on a control = spurious findings, fails Gate A. Additive field on THIS object, not a second schema. Boolean/counts only, no bodies. |
+| `task_class` | string \| null | **Routing extension (road-to-cost-aware-model-routing Phase 0).** Category id of the dispatched slice (e.g. `read-only-fanout`, `mechanical-edit`, `implementation`, `review-synthesis`). Enum-style id only, never free-form task text. `null` = pre-extension line / unclassified. |
+| `tier_chosen` | string \| null | Tier the slice was dispatched on (`lite` \| `medium` \| `high`). `null` = pre-extension line. |
+| `tier_source` | enum \| null | Where `tier_chosen` came from: `static` (frontmatter/category pin) · `inferred` (deterministic per-slice inference) · `inherit` (session tier — no downshift decision). Lets the evidence gate score inferred routing separately from static pinning. |
+| `escalated_from` | string \| null | When the slice re-dispatched after a verification failure: tier of the FAILED attempt (e.g. `lite` when a lite return failed verify and the slice re-ran on `medium`). `null` = no escalation. |
+| `verify_result_by_tier` | object \| null | Map tier → verification result per attempt of this slice (e.g. `{"lite":"fail","medium":"pass"}`). Values: `pass` \| `fail` \| `skipped`. Feeds the per-tier verify-pass-rate tripwire. Enums only, no verdict bodies. |
+
+All five routing fields are additive and optional — a line without them is
+still a valid orchestration line; readers ignore unknown fields per the v1
+forward-compat rule.
 
 ## Privacy floor
 

package/dist/agent-src/contexts/execution/subagent-steering.md

@@ -42,6 +42,38 @@ Only automatic response to a transient failure; structural/semantic errors (e.g.
 `BLOCKED` envelope) do **not** trigger a downshift — escalate to the orchestrator
 immediately.
 
+## Verify-fail escalation — the downshift cascade (M3)
+
+Cheap-first cascade for DOWNSHIFTED slices only
+(road-to-cost-aware-model-routing, council 2026-07-08). Transient failures
+(above) and verify-fails are distinct: transient retries downward once; a
+**verification failure escalates upward**.
+
+```
+VERIFY-FAIL ON A DOWNSHIFTED RETURN → RE-DISPATCH ONE TIER UP.
+COUNTS AGAINST THE EXISTING N=3 BUDGET — NEVER A NEW BUDGET.
+ATTEMPT 1 lite → ATTEMPT 2 medium → ATTEMPT 3 = SLICE FAILED,
+ORCHESTRATOR REPLANS AT SESSION TIER.
+ESCALATION TRIGGER IS THE JUDGE VERDICT / DETERMINISTIC VERIFY RESULT —
+NEVER THE SUBAGENT'S OWN CONFIDENCE.
+```
+
+- **Scope:** slices with `tier_source: static | inferred` only. `inherit`
+  slices keep existing same-tier retry semantics — no behavior change outside
+  the downshift path.
+- **Budget accounting:** each escalated attempt consumes one of the slice's
+  three attempts (`budgetHalt()` unchanged). Two failed attempts mark the
+  slice failed; the orchestrator replans — a slice's verify-fail never
+  poisons the orchestrator trajectory, only the final verified return (or
+  failure mark) enters its context.
+- **Telemetry:** the re-dispatch records `escalated_from: <failed tier>` and
+  appends to `verify_result_by_tier`.
+- **Economics guard:** a class escalating > 40% of the time is cheaper
+  started on the higher tier — the escalation-rate tripwire (below) promotes
+  its static default; the cascade is for the tail, not the norm.
+
+Deterministic reference: `escalateOnVerifyFail()`.
+
 ## Failure-type stop — the N=3 budget applied per subagent type
 
 Two consecutive **verification-failed** returns from one subagent type in a
@@ -88,6 +120,26 @@ The guardrail thresholds (`breachedGuardrails()`), read off the
 
 A breach is a maintainer/user signal, surfaced — never an automatic flip.
 
+## Cost-routing tripwires — steering policy for downshifted dispatch
+
+Two tripwires guard the cost-aware downshift path
+(road-to-cost-aware-model-routing, council 2026-07-08). Like the rollback
+guardrails they are **surfaced, never auto-flipped** — steering policy over
+the routing telemetry fields (`task_class`, `tier_chosen`, `escalated_from`,
+`verify_result_by_tier` in [`orchestration-telemetry`](orchestration-telemetry.md)),
+not a new mechanism:
+
+| Tripwire | Threshold | Action when fired |
+|---|---|---|
+| **Escalation-rate promotion** | per-class escalation rate > 40% over the rolling window | Class's default tier is wrong — cascading it costs more than starting high (decision-theoretic escalation analysis). Promote the class's static default one tier, log the promotion; do not keep cascading. |
+| **Verify-pass drift** | a tier's verify-pass rate drops below its trailing baseline | Verifier or model drift — a drifting verifier silently escalates everything (cost ~3x). Surface the drift with per-tier numbers; never silently absorb the extra escalations. |
+
+Deterministic references: `escalationPromotionCandidates()` and
+`verifyPassDrift()` over `readTierRoutingMetrics()` aggregates. Per-tier
+quality view (spend by tier, escalation count by class, verify-pass rate by
+tier) surfaces via `/cost:report` — the delayed-signal quality guard: cost
+dashboards alone look fine while quality regresses.
+
 ## Kill-switch
 
 ```
@@ -101,7 +153,8 @@ This is the canonical disable — no code change, effective on the next run.
 
 [`src/scripts/_lib/subagent_steering.ts`](../../../../src/scripts/_lib/subagent_steering.ts)
 (`isLayerDisabled`, `budgetHalt`, `typeStop`, `sliceDispatchAllowed`,
-`breachedGuardrails`), covered by
+`breachedGuardrails`, `readTierRoutingMetrics`,
+`escalationPromotionCandidates`, `verifyPassDrift`), covered by
 [`tests/scripts/_lib_subagent_steering.test.ts`](../../../../tests/scripts/_lib_subagent_steering.test.ts).
 
 ## Related

package/dist/agent-src/contexts/model-recommendations.md

@@ -39,6 +39,25 @@ tier is the reasoning band; `context: large` is the context-window need.
 | **Implementation after a `high`-tier plan** | `medium` | Plan is done, execution is mechanical |
 | **Trivial mechanical** (formatting, one-line config, rote rename) | `lite` | No reasoning required; fastest tier suffices |
 
+## Subagent Category → Tier Defaults (dispatch-time downshift)
+
+Normative defaults for DISPATCHED subagent slices (road-to-cost-aware-model-routing,
+council 2026-07-08). The orchestrator's own session model is never switched;
+these tiers apply to the sub-task the orchestrator spawns. Category-keyed —
+immune to per-instance misrouting; unknown/ambiguous category → `inherit`.
+
+| Subagent category | Tier | Why |
+|---|---|---|
+| Read-only fan-out (grep / inventory / file discovery) | `lite` | Returns get deterministic verification; quality risk ~0 by construction |
+| Mechanical single-file regen / template-driven transform | `lite`→`medium` fallback | Pattern application, no open-ended reasoning; verify-fail escalates one tier |
+| Implementation (bounded, planned slice) | `medium` | Plan exists; execution is pattern work |
+| Review / judge / synthesis / architecture | `medium`\|`high` | Reasoning depth is the product |
+
+**Judge asymmetry invariant:** the cross-model judge always runs one tier
+ABOVE the implementer tier (ladder in
+[`subagent-configuration`](subagent-configuration.md)). Downshifting an
+implementer never downshifts its judge.
+
 ## Detection Heuristics
 
 | Signal | Task Type | Tier |

package/dist/agent-src/contexts/subagent-configuration.md

@@ -25,6 +25,14 @@ If the session runs on **opus**, judge stays on opus (no higher tier
 available). If the session runs on **sonnet**, judge defaults to opus.
 If the session runs on **haiku**, judge defaults to sonnet.
 
+**Downshift never touches the judge.** When cost-aware routing runs an
+implementer on a downshifted tier (per the category → tier defaults in
+[`model-recommendations § Subagent Category → Tier Defaults`](model-recommendations.md)),
+the judge still resolves one tier above the IMPLEMENTER's resolved tier —
+a `lite` implementer gets at least a `medium` judge. Downshifting an
+implementer never downshifts its judge below what the verify contract
+requires; a judge is never `lite`.
+
 ## Resolution order
 
 For both implementer and judge:

package/dist/agent-src/skills/skill-writing/SKILL.md

@@ -224,6 +224,10 @@ record it in the commit message (`Eval stub: deferred`). Peer examples
 for the expected format: `php-coder/evals/triggers.json`,
 `eloquent/evals/triggers.json`, `skill-writing/evals/triggers.json`.
 
+Presence CI-enforced for new skills: `check_trigger_eval_presence` fails
+any skill outside shrink-only grandfather allowlist lacking
+`evals/triggers.json` — *skip* defers query quality, never the file.
+
 Rules / commands / guidelines do **not** get eval stubs — only skills
 route through the top-level catalogue.
 

package/dist/agent-src/templates/agents/agent-project-settings.example.yml

@@ -39,7 +39,7 @@ schema_version: 1
 # CI guard: a release bump of `package.json` must update this value
 # in lockstep — see scripts/check_template_pin_drift.ts (road-to-
 # portable-runtime-and-update-check P3.3).
-agent_config_version: "8.5.0"
+agent_config_version: "8.7.0"
 
 # --- Project identity ---
 project:

package/dist/discovery/deprecation-report.md

@@ -1,6 +1,6 @@
 # Discovery — Deprecation Report
 
-- Generated: `2026-07-08T12:48:25Z`
+- Generated: `2026-07-08T15:01:19Z`
 - Deprecated artefacts: **0**
 
 _None. Tree is clean._

package/dist/discovery/discovery-manifest.json

@@ -2925,7 +2925,7 @@
     },
     {
       "category": "command",
-      "checksum": "sha256:1809087ff3860b7d07fb42958e58f73297451a669c57573137b5cf8ea0284236",
+      "checksum": "sha256:90b89f5241ecad5adb6b6de797a2b71e0a87898b8e3f5a0958be4df293246a3a",
       "install": {
         "default": true,
         "removable": false
@@ -11982,7 +11982,7 @@
     },
     {
       "category": "skill",
-      "checksum": "sha256:ce7bb5aa334783a058f320faf1dfb41aa70140d0a557be29d942ddc08898b239",
+      "checksum": "sha256:87eaa14cd95565d3c642e6e5a3ba1e26ac3b0ee1904e05f92c28ea9512c5dbc6",
       "install": {
         "default": true,
         "removable": false
@@ -12769,7 +12769,7 @@
       "workspaces": []
     }
   ],
-  "checksum": "sha256:4dd1cf9aacb705067e017342c3d7633728bd2822ef8d6d8cacaf8406c7131334",
+  "checksum": "sha256:9902bbcc7fac058b3506979d8233180ef0a52be98f42cec030433ee6781a5cf3",
   "deprecations": [
     {
       "key": "tier",
@@ -12912,7 +12912,7 @@
       "reason": "scaffold template for ticket-bundle tickets (ADR-101); carries no runtime frontmatter — emit-tickets fills it in per ticket"
     }
   ],
-  "generated_at": "2026-07-08T12:48:25Z",
+  "generated_at": "2026-07-08T15:01:19Z",
   "packs": [
     {
       "artefact_count": 95,

package/dist/discovery/discovery-manifest.json.sha256

@@ -1 +1 @@
-e6337c8304f42bebf186771bae9266ed3da8f3fc9958279cd316b2d7df0ec25a  discovery-manifest.json
+589017598b9d0eab5bfa36b665f3a6d8407ee34a45aa61d913ae9172f71c3ab3  discovery-manifest.json

package/dist/discovery/discovery-manifest.summary.md

@@ -1,6 +1,6 @@
 # Discovery Manifest — Summary
 
-- Generated: `2026-07-08T12:48:25Z`
+- Generated: `2026-07-08T15:01:19Z`
 - Scanner: `f36b5a348348`
 - Artefacts: **533**
 - Unassigned: **0**

package/dist/discovery/orphan-report.md

@@ -1,6 +1,6 @@
 # Discovery — Orphan Report
 
-- Generated: `2026-07-08T12:48:25Z`
+- Generated: `2026-07-08T15:01:19Z`
 - Orphan artefacts: **0**
 
 > An orphan is an artefact whose declared pack has no other members.

package/dist/discovery/packs.json

@@ -1,6 +1,6 @@
 {
-  "checksum": "sha256:4dd1cf9aacb705067e017342c3d7633728bd2822ef8d6d8cacaf8406c7131334",
-  "generated_at": "2026-07-08T12:48:25Z",
+  "checksum": "sha256:9902bbcc7fac058b3506979d8233180ef0a52be98f42cec030433ee6781a5cf3",
+  "generated_at": "2026-07-08T15:01:19Z",
   "packs": [
     {
       "always_on": false,

package/dist/discovery/trust-report.md

@@ -1,6 +1,6 @@
 # Discovery — Trust Report
 
-- Generated: `2026-07-08T12:48:25Z`
+- Generated: `2026-07-08T15:01:19Z`
 - Workspaces tracked: **10**
 - Human-review-required artefacts: **3**
 

package/dist/discovery/workspaces.json

@@ -1,6 +1,6 @@
 {
-  "checksum": "sha256:4dd1cf9aacb705067e017342c3d7633728bd2822ef8d6d8cacaf8406c7131334",
-  "generated_at": "2026-07-08T12:48:25Z",
+  "checksum": "sha256:9902bbcc7fac058b3506979d8233180ef0a52be98f42cec030433ee6781a5cf3",
+  "generated_at": "2026-07-08T15:01:19Z",
   "scanner_version": "f36b5a348348",
   "workspaces": [
     {

package/dist/install/emit_host_rules_cli.js

@@ -0,0 +1,185 @@
+#!/usr/bin/env tsx
+/**
+ * Consumer host-native rule emission
+ * (road-to-request-scoped-rule-load Phase 1b Step 3).
+ *
+ * Before this CLI, consumer Cursor got a symlink farm to raw `.md` (no
+ * `.mdc`, no auto-attach globs) and consumer `.windsurfrules` was built by
+ * a bash concatenator that STRIPPED all frontmatter — destroying the
+ * host-native trigger signal Phase 2 added to the projection path.
+ *
+ * ## Recorded decision — install-time emission, not dist artifacts
+ *
+ * Phase 1b Step 3 asked for one recorded choice: pre-built host artifacts
+ * in `dist/` vs emission at install time. Decision: INSTALL-TIME EMISSION,
+ * re-using the exported condense emitters (`_emit_cursor_mdc`,
+ * `_emit_windsurf_rule`, `strip_frontmatter`) verbatim. Rationale:
+ *   - a new `dist/agent-src/hosts/` tree would cascade through the
+ *     discovery manifest, artefact checksums, condensation hashes and the
+ *     always-budget gates for what is derived data;
+ *   - dist artifacts are scope-agnostic — install-time emission runs AFTER
+ *     the Phase-1b rule filter, so scoped installs get scoped host files
+ *     for free;
+ *   - re-using the exported emitters keeps consumer output byte-identical
+ *     to the maintainer projection (Pipeline B never drifts from A).
+ * The trade-off (node required at install time) matches the rule-scope
+ * resolver: no node → install.sh keeps its legacy fallback surfaces.
+ *
+ * Usage:
+ *   emit_host_rules_cli.ts --rules-dir <installed rules dir>
+ *                          --project-root <consumer root>
+ *                          --tools cursor,windsurf
+ *
+ * Exit codes: 0 emitted · 2 usage error · 1 emission failure (caller falls
+ * back to the legacy surface).
+ */
+import * as fs from 'node:fs';
+import * as path from 'node:path';
+import process from 'node:process';
+import { fileURLToPath, pathToFileURL } from 'node:url';
+import { _emit_cursor_mdc, _emit_windsurf_rule, strip_frontmatter, } from '../scripts/condense.js';
+function _ruleFiles(rulesDir) {
+    return fs
+        .readdirSync(rulesDir)
+        .filter((n) => n.endsWith('.md'))
+        .sort()
+        .map((n) => path.join(rulesDir, n))
+        .filter((p) => {
+        try {
+            return fs.statSync(p).isFile();
+        }
+        catch {
+            return false;
+        }
+    });
+}
+/** Remove entries not in `valid` (mirror of condense's `_clean_modern_dir`). */
+function _cleanDir(dir, valid) {
+    let entries;
+    try {
+        entries = fs.readdirSync(dir);
+    }
+    catch {
+        return;
+    }
+    for (const name of entries) {
+        if (name === 'README.md' || valid.has(name)) {
+            continue;
+        }
+        const full = path.join(dir, name);
+        try {
+            if (fs.lstatSync(full).isDirectory()) {
+                fs.rmSync(full, { recursive: true, force: true });
+            }
+            else {
+                fs.unlinkSync(full);
+            }
+        }
+        catch {
+            /* best-effort clean */
+        }
+    }
+}
+export function emitCursor(rulesDir, projectRoot) {
+    const targetDir = path.join(projectRoot, '.cursor', 'rules');
+    const files = _ruleFiles(rulesDir);
+    const valid = new Set();
+    for (const src of files) {
+        const name = `${path.basename(src, '.md')}.mdc`;
+        _emit_cursor_mdc(src, path.join(targetDir, name));
+        valid.add(name);
+    }
+    _cleanDir(targetDir, valid);
+    return files.length;
+}
+export function emitWindsurf(rulesDir, projectRoot) {
+    const perRuleDir = path.join(projectRoot, '.windsurf', 'rules');
+    const files = _ruleFiles(rulesDir);
+    const valid = new Set();
+    for (const src of files) {
+        const name = path.basename(src);
+        _emit_windsurf_rule(src, path.join(perRuleDir, name));
+        valid.add(name);
+    }
+    _cleanDir(perRuleDir, valid);
+    // Concatenated legacy surface — same format as the projection-path
+    // generator (condense.generate_windsurfrules), consumer-sourced header.
+    const parts = ['# Auto-generated from .augment/rules/ — do not edit directly\n'];
+    for (const src of files) {
+        const content = strip_frontmatter(fs.readFileSync(src, 'utf-8'));
+        parts.push(`---\n\n${content.trim()}\n`);
+    }
+    fs.writeFileSync(path.join(projectRoot, '.windsurfrules'), parts.join('\n') + '\n', 'utf-8');
+    return files.length;
+}
+export function main(argv = process.argv.slice(2)) {
+    let rulesDir = '';
+    let projectRoot = '';
+    let tools = [];
+    for (let i = 0; i < argv.length; i += 1) {
+        const arg = argv[i];
+        if (arg === '--rules-dir') {
+            rulesDir = argv[i + 1] ?? '';
+            i += 1;
+        }
+        else if (arg === '--project-root') {
+            projectRoot = argv[i + 1] ?? '';
+            i += 1;
+        }
+        else if (arg === '--tools') {
+            tools = (argv[i + 1] ?? '').split(',').filter((t) => t.length > 0);
+            i += 1;
+        }
+        else {
+            process.stderr.write(`emit_host_rules_cli: unknown argument: ${arg}\n`);
+            return 2;
+        }
+    }
+    if (rulesDir === '' || projectRoot === '' || tools.length === 0) {
+        process.stderr.write('usage: emit_host_rules_cli.ts --rules-dir <dir> --project-root <dir> --tools cursor,windsurf\n');
+        return 2;
+    }
+    if (!fs.existsSync(rulesDir)) {
+        process.stderr.write(`emit_host_rules_cli: rules dir not found: ${rulesDir}\n`);
+        return 1;
+    }
+    try {
+        for (const tool of tools) {
+            if (tool === 'cursor') {
+                const n = emitCursor(rulesDir, path.resolve(projectRoot));
+                process.stdout.write(`cursor: ${n} .mdc rule(s)\n`);
+            }
+            else if (tool === 'windsurf') {
+                const n = emitWindsurf(rulesDir, path.resolve(projectRoot));
+                process.stdout.write(`windsurf: ${n} rule(s) + .windsurfrules\n`);
+            }
+            else {
+                process.stderr.write(`emit_host_rules_cli: unknown tool: ${tool}\n`);
+                return 2;
+            }
+        }
+        return 0;
+    }
+    catch (e) {
+        process.stderr.write(`emit_host_rules_cli: emission failed: ${e instanceof Error ? e.message : String(e)}\n`);
+        return 1;
+    }
+}
+function _isCliEntry() {
+    if (process.argv[1] === undefined)
+        return false;
+    const argvUrl = pathToFileURL(path.resolve(process.argv[1])).href;
+    if (import.meta.url === argvUrl)
+        return true;
+    try {
+        return (fs.realpathSync(fileURLToPath(import.meta.url)) ===
+            fs.realpathSync(path.resolve(process.argv[1])));
+    }
+    catch {
+        return false;
+    }
+}
+if (_isCliEntry()) {
+    process.exit(main());
+}
+//# sourceMappingURL=emit_host_rules_cli.js.map

package/dist/install/emit_host_rules_cli.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"emit_host_rules_cli.js","sourceRoot":"","sources":["../../src/install/emit_host_rules_cli.ts"],"names":[],"mappings":";AACA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAiCG;AACH,OAAO,KAAK,EAAE,MAAM,SAAS,CAAC;AAC9B,OAAO,KAAK,IAAI,MAAM,WAAW,CAAC;AAClC,OAAO,OAAO,MAAM,cAAc,CAAC;AACnC,OAAO,EAAE,aAAa,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AAExD,OAAO,EACH,gBAAgB,EAChB,mBAAmB,EACnB,iBAAiB,GACpB,MAAM,wBAAwB,CAAC;AAEhC,SAAS,UAAU,CAAC,QAAgB;IAChC,OAAO,EAAE;SACJ,WAAW,CAAC,QAAQ,CAAC;SACrB,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;SAChC,IAAI,EAAE;SACN,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC;SAClC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE;QACV,IAAI,CAAC;YACD,OAAO,EAAE,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC;QACnC,CAAC;QAAC,MAAM,CAAC;YACL,OAAO,KAAK,CAAC;QACjB,CAAC;IACL,CAAC,CAAC,CAAC;AACX,CAAC;AAED,gFAAgF;AAChF,SAAS,SAAS,CAAC,GAAW,EAAE,KAA0B;IACtD,IAAI,OAAiB,CAAC;IACtB,IAAI,CAAC;QACD,OAAO,GAAG,EAAE,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC;IAClC,CAAC;IAAC,MAAM,CAAC;QACL,OAAO;IACX,CAAC;IACD,KAAK,MAAM,IAAI,IAAI,OAAO,EAAE,CAAC;QACzB,IAAI,IAAI,KAAK,WAAW,IAAI,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;YAC1C,SAAS;QACb,CAAC;QACD,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;QAClC,IAAI,CAAC;YACD,IAAI,EAAE,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,WAAW,EAAE,EAAE,CAAC;gBACnC,EAAE,CAAC,MAAM,CAAC,IAAI,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;YACtD,CAAC;iBAAM,CAAC;gBACJ,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC;YACxB,CAAC;QACL,CAAC;QAAC,MAAM,CAAC;YACL,uBAAuB;QAC3B,CAAC;IACL,CAAC;AACL,CAAC;AAED,MAAM,UAAU,UAAU,CAAC,QAAgB,EAAE,WAAmB;IAC5D,MAAM,SAAS,GAAG,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,SAAS,EAAE,OAAO,CAAC,CAAC;IAC7D,MAAM,KAAK,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAC;IACnC,MAAM,KAAK,GAAG,IAAI,GAAG,EAAU,CAAC;IAChC,KAAK,MAAM,GAAG,IAAI,KAAK,EAAE,CAAC;QACtB,MAAM,IAAI,GAAG,GAAG,IAAI,CAAC,QAAQ,CAAC,GAAG,EAAE,KAAK,CAAC,MAAM,CAAC;QAChD,gBAAgB,CAAC,GAAG,EAAE,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC,CAAC;QAClD,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;IACpB,CAAC;IACD,SAAS,CAAC,SAAS,EAAE,KAAK,CAAC,CAAC;IAC5B,OAAO,KAAK,CAAC,MAAM,CAAC;AACxB,CAAC;AAED,MAAM,UAAU,YAAY,CAAC,QAAgB,EAAE,WAAmB;IAC9D,MAAM,UAAU,GAAG,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,WAAW,EAAE,OAAO,CAAC,CAAC;IAChE,MAAM,KAAK,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAC;IACnC,MAAM,KAAK,GAAG,IAAI,GAAG,EAAU,CAAC;IAChC,KAAK,MAAM,GAAG,IAAI,KAAK,EAAE,CAAC;QACtB,MAAM,IAAI,GAAG,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC;QAChC,mBAAmB,CAAC,GAAG,EAAE,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,IAAI,CAAC,CAAC,CAAC;QACtD,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;IACpB,CAAC;IACD,SAAS,CAAC,UAAU,EAAE,KAAK,CAAC,CAAC;IAE7B,mEAAmE;IACnE,wEAAwE;IACxE,MAAM,KAAK,GAAG,CAAC,gEAAgE,CAAC,CAAC;IACjF,KAAK,MAAM,GAAG,IAAI,KAAK,EAAE,CAAC;QACtB,MAAM,OAAO,GAAG,iBAAiB,CAAC,EAAE,CAAC,YAAY,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC,CAAC;QACjE,KAAK,CAAC,IAAI,CAAC,UAAU,OAAO,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;IAC7C,CAAC;IACD,EAAE,CAAC,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,gBAAgB,CAAC,EAAE,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,IAAI,EAAE,OAAO,CAAC,CAAC;IAC7F,OAAO,KAAK,CAAC,MAAM,CAAC;AACxB,CAAC;AAED,MAAM,UAAU,IAAI,CAAC,OAA0B,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC;IAChE,IAAI,QAAQ,GAAG,EAAE,CAAC;IAClB,IAAI,WAAW,GAAG,EAAE,CAAC;IACrB,IAAI,KAAK,GAAa,EAAE,CAAC;IACzB,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC;QACtC,MAAM,GAAG,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC;QACpB,IAAI,GAAG,KAAK,aAAa,EAAE,CAAC;YACxB,QAAQ,GAAG,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC;YAC7B,CAAC,IAAI,CAAC,CAAC;QACX,CAAC;aAAM,IAAI,GAAG,KAAK,gBAAgB,EAAE,CAAC;YAClC,WAAW,GAAG,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC;YAChC,CAAC,IAAI,CAAC,CAAC;QACX,CAAC;aAAM,IAAI,GAAG,KAAK,SAAS,EAAE,CAAC;YAC3B,KAAK,GAAG,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;YACnE,CAAC,IAAI,CAAC,CAAC;QACX,CAAC;aAAM,CAAC;YACJ,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,0CAA0C,GAAG,IAAI,CAAC,CAAC;YACxE,OAAO,CAAC,CAAC;QACb,CAAC;IACL,CAAC;IACD,IAAI,QAAQ,KAAK,EAAE,IAAI,WAAW,KAAK,EAAE,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC9D,OAAO,CAAC,MAAM,CAAC,KAAK,CAChB,gGAAgG,CACnG,CAAC;QACF,OAAO,CAAC,CAAC;IACb,CAAC;IACD,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;QAC3B,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,6CAA6C,QAAQ,IAAI,CAAC,CAAC;QAChF,OAAO,CAAC,CAAC;IACb,CAAC;IACD,IAAI,CAAC;QACD,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;YACvB,IAAI,IAAI,KAAK,QAAQ,EAAE,CAAC;gBACpB,MAAM,CAAC,GAAG,UAAU,CAAC,QAAQ,EAAE,IAAI,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC,CAAC;gBAC1D,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,WAAW,CAAC,iBAAiB,CAAC,CAAC;YACxD,CAAC;iBAAM,IAAI,IAAI,KAAK,UAAU,EAAE,CAAC;gBAC7B,MAAM,CAAC,GAAG,YAAY,CAAC,QAAQ,EAAE,IAAI,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC,CAAC;gBAC5D,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,aAAa,CAAC,6BAA6B,CAAC,CAAC;YACtE,CAAC;iBAAM,CAAC;gBACJ,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,sCAAsC,IAAI,IAAI,CAAC,CAAC;gBACrE,OAAO,CAAC,CAAC;YACb,CAAC;QACL,CAAC;QACD,OAAO,CAAC,CAAC;IACb,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACT,OAAO,CAAC,MAAM,CAAC,KAAK,CAChB,yCAAyC,CAAC,YAAY,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAC1F,CAAC;QACF,OAAO,CAAC,CAAC;IACb,CAAC;AACL,CAAC;AAED,SAAS,WAAW;IAChB,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,SAAS;QAAE,OAAO,KAAK,CAAC;IAChD,MAAM,OAAO,GAAG,aAAa,CAAC,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IAClE,IAAI,MAAM,CAAC,IAAI,CAAC,GAAG,KAAK,OAAO;QAAE,OAAO,IAAI,CAAC;IAC7C,IAAI,CAAC;QACD,OAAO,CACH,EAAE,CAAC,YAAY,CAAC,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YAC/C,EAAE,CAAC,YAAY,CAAC,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CACjD,CAAC;IACN,CAAC;IAAC,MAAM,CAAC;QACL,OAAO,KAAK,CAAC;IACjB,CAAC;AACL,CAAC;AAED,IAAI,WAAW,EAAE,EAAE,CAAC;IAChB,OAAO,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC;AACzB,CAAC"}

package/dist/install/install.mjs

@@ -13877,6 +13877,12 @@ var settingsSchema = external_exports.object({
   projection: external_exports.object({
     mode: projectionMode.default("legacy-all").describe(
       "Whether the per-tool projector writes EVERY artefact into the host-tool trees (.claude/ .cursor/ .windsurf/) or only the active profile + packs' artefacts (ADR-040, docs/contracts/capability-packs.md). legacy-all = (default, non-breaking) project the full surface exactly as 5.x did. scoped = project only the active profile's packs unioned with the runtime.active_packs overlay, expanded over the requires graph \u2014 opt in with `agent-config use --profile=<id>`. A failed scoped projection restores the full tree."
+    ),
+    rule_workspaces: external_exports.array(external_exports.string()).default([]).describe(
+      "Workspace scope for the RULE layer only (road-to-request-scoped-rule-load P1/P1b, opt-in). Absent or empty = legacy-all: every rule projects AND installs. Non-empty = only rules whose workspaces frontmatter intersects this list are projected (condense) and installed (install.sh + global wizard payload). Kernel rules always ship; untagged rules fail safe. The default flip to a scoped value is a HUMAN release gate \u2014 do not set this from automation."
+    ),
+    rule_packs: external_exports.array(external_exports.string()).default([]).describe(
+      "Optional second scoping axis for the RULE layer, per pack ids (src/config/discovery/packs.yml). When set, a non-kernel rule also needs a packs frontmatter intersection to ship \u2014 e.g. deselecting frontend-design drops ui-audit-gate + design-fidelity. Same opt-in / human-gate semantics as rule_workspaces."
     )
   }).default({ mode: "legacy-all" }),
   rule_loading_tier: ruleLoadingTier.default("balanced").describe(

package/dist/install/plan.js

@@ -103,7 +103,10 @@ export function buildInstallPlan(inputs) {
     const filesByTool = {};
     for (const source of inputs.sources) {
         const bucket = filesByTool[source.toolId] ?? [];
-        const files = walkSourceTree(source.srcDir);
+        let files = walkSourceTree(source.srcDir);
+        if (source.fileFilter !== undefined) {
+            files = files.filter(source.fileFilter);
+        }
         for (const srcFile of files) {
             const rel = relative(source.srcDir, srcFile);
             const destPath = resolve(source.destDir, rel);